Enabled session.cookie_httponly/session.cookie_secure settings at php.ini.
in case of less than  PHP5.2
xoops_redirectに.example.com/foo/barと入れられると、ログイン後に.example.comのサブサイトに富んでしまいます。
Merge pull request #102 from tohokuaiki/spike

change xoopscube custom session.
Merge pull request #106 from tohokuaiki/spike2

vulnerability about xoops_redirect
Merge branch 'master' into 2.3